410 lines
17 KiB
Plaintext
410 lines
17 KiB
Plaintext
|
File: BASIC TELCOM IV
|
|||
|
Read 66 times
|
|||
|
|
|||
|
******BIOC Agent 003's course in*******
|
|||
|
* *
|
|||
|
* ========================== *
|
|||
|
* =BASIC TELECOMMUNCIATIONS= *
|
|||
|
* ========================== *
|
|||
|
* PART IV *
|
|||
|
***************************************
|
|||
|
|
|||
|
Revised: 15-JUN-84
|
|||
|
|
|||
|
PREFACE:
|
|||
|
--------
|
|||
|
|
|||
|
Part IV will deal with the various types of operators, office hierarchy, &
|
|||
|
switching equipment.
|
|||
|
|
|||
|
|
|||
|
OPERATORS:
|
|||
|
----------
|
|||
|
|
|||
|
There are many types of operators in The Network and the more common ones
|
|||
|
will be discussed.
|
|||
|
|
|||
|
TSPS Operator:
|
|||
|
|
|||
|
The TSPS [(Traffic Service Position System) as opposed to This Shitty Phone Service] Operator is probably the bitch (or bastard for the phemale
|
|||
|
liberationists) that most of us are use to having to deal with.
|
|||
|
|
|||
|
Here are her responsibilities:
|
|||
|
|
|||
|
1) Obtaining billing information for Calling Card or 3rd number calls.
|
|||
|
|
|||
|
2) Identifying called customer on person-to-person calls.
|
|||
|
|
|||
|
3) Obtaining acceptance of charges on collect calls.
|
|||
|
|
|||
|
4) Identifying calling numbers. This only happens when the calling # is not
|
|||
|
automatically recorded by CAMA (Centralized Automatic Message Accounting) &
|
|||
|
forwarded from the local office. This could be caused by equipment failures
|
|||
|
(ANIF - Automatic Number Identification Failure) or if the office is not
|
|||
|
equipped for CAMA (ONI - Operator Number Identification).
|
|||
|
|
|||
|
<I once had an equipment failure happen to me & the TSPS operator came on and
|
|||
|
said, "What # are you calling FROM?" Out of curiosity, I gave her the # to my
|
|||
|
CO, she thanked me & then I was connected to a conversion that appeared to be
|
|||
|
between a frameman & his wife. Then it started ringing the party I originally
|
|||
|
wanted to call & everyone phreaked out (excuse the pun). I immediately dropped
|
|||
|
this dual line conference!>
|
|||
|
|
|||
|
You shouldn't mess with the TSPS operator since she KNOWS where you are calling
|
|||
|
from. Your number will show up on a 10-digit LED read-out (ANI board) She also
|
|||
|
knows whether or not you are at a fortress fone & she can trace calls quite
|
|||
|
readily. Out of all the operators, she is one of the MOST DANGEROUS.
|
|||
|
|
|||
|
INWARD Operator:
|
|||
|
|
|||
|
This operator assists your local TSPS ("O") operator in connecting calls. She
|
|||
|
will never question a call as long as the call is within HER SERVICE AREA.
|
|||
|
She can only be reached via other operators or by a Blue Box. From a BB,
|
|||
|
you would dial KP+NPA+121+ST for the INWARD operator that will help you connect
|
|||
|
any calls within that NPA only. (Blue Boxing will be discussed in a future part
|
|||
|
of BASIC TELCOM)
|
|||
|
|
|||
|
DIRECTORY ASSISTANCE Operator:
|
|||
|
|
|||
|
This is the operator that you are connected to when you dial: 411 or
|
|||
|
NPA-555-1212. She does not readily know where you are calling from. She does
|
|||
|
not have access to unlisted #'s, but she does know if an unlisted # exists for
|
|||
|
a certain listing.
|
|||
|
|
|||
|
There is also a directory assistance for deaf people who use Teletypewriters
|
|||
|
If your modem can transfer BAUDOT [(45.5 baud)/ (the Apple Cat can)], then you
|
|||
|
can call him/her up and have an interesting conversation. The # is:
|
|||
|
800-855-1155. They uses the standard Telex abbreviations such as GA for Go
|
|||
|
Ahead. They tend to be nicer & will talk longer than your regular operators.
|
|||
|
Also, they are more vulnerable into being talked out of information through the
|
|||
|
process of "social engineering" as Cheshire Catalyst would put it.
|
|||
|
|
|||
|
<Unfortunately, they do not have access to much. I once bullshitted with one
|
|||
|
of these operators and I found out that there are 2 such DA offices that handle
|
|||
|
TTY. One is in Philadelphia and the other is in California. They have
|
|||
|
approximately 7 operators each. Most of the TTY operators think their job is
|
|||
|
boring (based on an official "BIOC poll"). They also feel they are under-paid.
|
|||
|
They actually call up a regular DA # to process your request (Sorry, no fancy
|
|||
|
computers!).>
|
|||
|
|
|||
|
Other operators have access to their own DA by dialing KP+NPA+131+ST (MF).
|
|||
|
|
|||
|
In the confusion due to the aftermath of the Bell System break-up, it seems
|
|||
|
that it will now cost 50 cents per DA call! Exceptions seem to be Canadian
|
|||
|
DA & the TTY DA (for the time being). Thus you might be able to avoid being
|
|||
|
charged for DA calls by using your computer [running at 45.5 baud!] and their
|
|||
|
800 TOLL-FREE #! If they decide to charge from fortresses also, the method of
|
|||
|
making DA calls from the fortress and purposely asking for an unlisted # so you
|
|||
|
can have the operator credit you home # will no longer work!
|
|||
|
|
|||
|
|
|||
|
CN/A Operators:
|
|||
|
|
|||
|
CN/A operators are operators that do exactly the opposite of what directory
|
|||
|
assistance operators are for. See part II, for more info on CN/A & #'s. In my
|
|||
|
experiences, these operators know more than the DA op's do & they are more
|
|||
|
susceptible to "social engineering." It is possible to bullshit a CN/A operator
|
|||
|
for the NON-PUB DA # (ie, you give them the name & they give you the unlisted
|
|||
|
#). This is due to the fact that they assume your are a phellow company
|
|||
|
employee. Unfortunately, the break-up has resulted in the break-up of a few
|
|||
|
NON-PUB #'s and policy changes in CN/A.
|
|||
|
|
|||
|
INTERCEPT Operator:
|
|||
|
|
|||
|
The intercept operator is the one that you are connected to when there are not
|
|||
|
enough recordings available to tell you that the # has been disconnected or
|
|||
|
changed. She usually says, "What # you callin'?" with a foreign accent. This
|
|||
|
is the lowest operator lifeform. Even though they don't know where you are
|
|||
|
calling from, it is a waste of your time to try to verbally abuse them since
|
|||
|
they usually understand very little English.
|
|||
|
|
|||
|
Incidentally, a few areas do have intelligent intercept operators.
|
|||
|
|
|||
|
OTHER Operators:
|
|||
|
|
|||
|
And then there are the: Mobile,Ship-to-Shore, Conference, Marine Verify,
|
|||
|
"Leave Word & Call Back," Rout & Rate (KP+800+141+1212+ST - new # as result of
|
|||
|
Bell breakup), & other special operators who have one purpose or another in the
|
|||
|
Network.
|
|||
|
|
|||
|
Problems with an Operator? Ask to speak to their supervisor...or better yet,
|
|||
|
the Group Chief (who is the highest ranking official in any office) who is the
|
|||
|
equivalent of the Madame in a whorehouse (if you will excuse the analogy).
|
|||
|
|
|||
|
By the way, some CO's that will allow you to dial a 1 or 0 as the 4th digit,
|
|||
|
will also allow you to call special operators & other phun Telco #'s without a
|
|||
|
blue box. This is very rare though! For example, 212-121-1111 will get you a
|
|||
|
NY Inward Operator.
|
|||
|
|
|||
|
|
|||
|
==================
|
|||
|
=OFFICE HIERARCHY=
|
|||
|
==================
|
|||
|
|
|||
|
Every switching office in North America (the NPA system), is assigned an office
|
|||
|
name & class. There are five classes of offices numbered 1 through 5. Your
|
|||
|
CO is most likely a class 5 or end office. All Long-Distance (Toll) calls
|
|||
|
are switched by a toll office which can be a class 4, 3, 2, or 1 office. There
|
|||
|
is also a 4X office called an intermediate point. The 4X office is a digital
|
|||
|
one that can have an unattended exchange attached to it (known as a Remote
|
|||
|
Switching Unit-RSU).
|
|||
|
|
|||
|
The following chart will list the Office #, name, & how many of those offices
|
|||
|
existed in North America in 1981.
|
|||
|
|
|||
|
Class Name Abb # Existing
|
|||
|
----- ---------------- --- ------------
|
|||
|
1 Regional Center RC 12
|
|||
|
2 Sectional Center SC 67
|
|||
|
3 Primary Center PC 230
|
|||
|
4 Toll Center TC 1,300
|
|||
|
4P Toll Point TP
|
|||
|
4X Intermediate Pt IP
|
|||
|
5 End Office EO 19,000
|
|||
|
R RSU RSU
|
|||
|
|
|||
|
When connecting a call from one party to another,the switching equipment
|
|||
|
usually tries to find the shortest route between the Class 5 end office of
|
|||
|
the caller & the Class 5 end office of the called party. If no inter-office
|
|||
|
trunks exist between the 2 parties, it will then move upto the next highest
|
|||
|
office for servicing (Class 4). If the Class 4 office cannot handle the call
|
|||
|
by sending it to another Class 4 or 5 office, it will be sent to the next
|
|||
|
office in the hierarchy (3). The switching equipment first uses the high-usage
|
|||
|
interoffice trunk groups, if they are busy it then goes to the final trunk
|
|||
|
groups on the next highest level. If the call cannot be connected then, you
|
|||
|
will probably get a re-order [120 IPM (Interruptions Per Minute) busy signal]
|
|||
|
signal. At this time, the guys at Network Operations are probably shitting in
|
|||
|
their pants and trying to avoid the dreaded Network Dreadlock (as seen on TV!).
|
|||
|
|
|||
|
It is also interesting to note that 9 connections in tandem is called
|
|||
|
ring-around-the rosy and it has never occurred in telephone history. This
|
|||
|
would cause an endless loop connection. [a neat way to really screw-up the
|
|||
|
Network]
|
|||
|
|
|||
|
The 10 regional centers in the US & the 2 in Canada are all interconnected.
|
|||
|
They form the foundation of the entire telephone network. Since there are
|
|||
|
only 12 of them, they are listed below:
|
|||
|
|
|||
|
Class 1 Regional Office Location NPA
|
|||
|
---------------------------------- ---
|
|||
|
Dallas 4 ESS 214
|
|||
|
Wayne, PA 215
|
|||
|
Denver 4T 303
|
|||
|
Regina No.2 SP1-4W [Canada] 306
|
|||
|
St. Louis 4T 314
|
|||
|
Rockdale, GA 404
|
|||
|
Pittsburgh 4E 412
|
|||
|
Montreal No.1 4AETS [Canada] 504
|
|||
|
Norwich, NY 607
|
|||
|
San Bernardino, CA 714
|
|||
|
Norway, IL 815
|
|||
|
White Plains 4T, NY 914
|
|||
|
|
|||
|
The following diagram demonstrates how the various offices may be connected:
|
|||
|
|
|||
|
^----------^----------^ Regional
|
|||
|
_!_ _!_ _!_Offices
|
|||
|
~~~~~!1! <----> !1! <----> !1!~~~~~
|
|||
|
--- --- ---
|
|||
|
! Others\/
|
|||
|
-^-------^-------^------^---------^
|
|||
|
_!_ _!_ _!_ _!__ _!_
|
|||
|
!2! !3! !4! !4P! !5!
|
|||
|
--- --- --- -^^- ---
|
|||
|
! ! ! !
|
|||
|
^----^ ! ^----^ !
|
|||
|
_!_ _!_ ! __!_ _!_ !
|
|||
|
!3! !4! ! !4X! !5! ^-----^
|
|||
|
--- -^- ! ---- --- _!__ _!_
|
|||
|
^ ! !4X! !5!
|
|||
|
__!_ ! ---- ---
|
|||
|
!5R! !-------------^
|
|||
|
-^^- /--------!---------\
|
|||
|
_!_ _!__ _!_ _!_
|
|||
|
!R! !4P! !4! !5!
|
|||
|
--- ---- --- ---
|
|||
|
|
|||
|
|
|||
|
=====================
|
|||
|
=SWITCHING EQUIPMENT=
|
|||
|
=====================
|
|||
|
|
|||
|
In the Network, there are 3 major types of switching equipment. They are known
|
|||
|
as: Step, Crossbar, & ESS.
|
|||
|
|
|||
|
|
|||
|
STEP-BY-STEP (SxS)
|
|||
|
|
|||
|
The Step-By-Step, a/k/a the Strowger switch or two-motion switch, was invented
|
|||
|
in 1889 by an undertaker named Almon Strowger. He invented this mechanical
|
|||
|
switching equipment because he felt that the biased operator was routing all
|
|||
|
requests for an 'undertaker' to her husband's business.
|
|||
|
|
|||
|
Bell started using this system in 1918 & as of 1978, over 53% of the Bell
|
|||
|
exchanges used this method of switching. This figure is probably substantially
|
|||
|
less now.
|
|||
|
|
|||
|
Step-by-Step switching is controlled directly by the dial pulses which move
|
|||
|
a series of switches (called the switch train) in order. When you first pick
|
|||
|
up the fone under SxS, a linefinder acknowledges the request (sooner or later)
|
|||
|
by sending a dial tone. If you then dialed 1234, the equipment would first
|
|||
|
find an idle selector switch. It would then move vertically 1 pulse, it
|
|||
|
would then move horizontally to find a free second selector, it would then
|
|||
|
move 2 vertical pulses, step horizontally to find the next selector, etc. Thus
|
|||
|
the first switch in the train takes no digits, the second switch takes 1 digit,
|
|||
|
the third switch takes 1 digit, & the last switch in the train (called the
|
|||
|
connector) takes the last 2 digits & connects your calls. A normal (10,000
|
|||
|
line) exchange requires 4 digits (0000-9999) to connect a local call & thus it
|
|||
|
takes 4 switches to connect every call (linefinder, 1st & 2nd selectors, & the
|
|||
|
connector) .
|
|||
|
|
|||
|
While it was the first, SxS sucks for the following reasons:
|
|||
|
|
|||
|
[1] The switches often become jammed thus the calls often become blocked.
|
|||
|
|
|||
|
[2] You can't use DTMF (Dual-Tone Multi-Frequency a/k/a Touch-Tone) directly.
|
|||
|
It is possible that the Telco may have installed a conversion kit but then the
|
|||
|
calls will go through just as slow as pulse, anyway!
|
|||
|
|
|||
|
[3] They use a lot of electricity & mechanical maintenance. (bad from Telco
|
|||
|
point of view)
|
|||
|
|
|||
|
[4] Everything is hardwired.
|
|||
|
|
|||
|
They can still hook up pen registers & other shit on the line so it is not
|
|||
|
exactly a phreak haven.
|
|||
|
|
|||
|
You can identify SxS offices by:
|
|||
|
|
|||
|
(1) Lack of DTMF or pulsing digits after dialing DTMF.
|
|||
|
|
|||
|
(2) If you go near the CO, it will sound like a typewriter testing factory.
|
|||
|
|
|||
|
(3) Lack of speed calling, call forwarding, & other custom services.
|
|||
|
|
|||
|
(4) Fortress fones that want your money first (as opposed to dial tone first
|
|||
|
ones).
|
|||
|
|
|||
|
The preceding don't necessarily imply that you have SxS but they surely give
|
|||
|
evidence that it might be. Also, if any of the above characteristics exist,
|
|||
|
it certainly isn't ESS! Also, SxS have pretty much been eradicated from large
|
|||
|
metropolitan areas such as NYC (212).
|
|||
|
|
|||
|
|
|||
|
CROSSBAR:
|
|||
|
|
|||
|
There are 3 major types of Crossbar systems called: No. 1 Crossbar (1XB),
|
|||
|
No. 4 Crossbar (4XB), & No. 5 Crossbar (5XB). 5XB has been the primary end
|
|||
|
office switch of Bell since the 60's and thus it is in wide-use. There is
|
|||
|
also a Crossbar Tandem (XBT) used for toll-switching.
|
|||
|
|
|||
|
Crossbar uses a common control switching method. When there is an incoming
|
|||
|
call, a stored program determines its route through the switching matrix.
|
|||
|
|
|||
|
In Crossbar, the basic operation principle is that a horizontal & a vertical
|
|||
|
line are energized in a matrix known as the crosspoint matrix. The point where
|
|||
|
these 2 lines meet in the matrix is the connection.
|
|||
|
|
|||
|
|
|||
|
+===+
|
|||
|
=ESS=
|
|||
|
+===+
|
|||
|
|
|||
|
Electronic Switching System (ESS)
|
|||
|
The Phreak's Nightmare Come True
|
|||
|
(or Orwell's Prophecy as 2600 puts it)
|
|||
|
|
|||
|
|
|||
|
ESS is Bell's move towards the Airstrip One society depicted in Orwell's 1984.
|
|||
|
|
|||
|
With ESS, EVERY single digit that you dial is recorded--even if it is a
|
|||
|
mistake. They know who you call, when you call, how long you talked for, &
|
|||
|
probably what you talked about (in some cases). ESS can (and is) also
|
|||
|
programmed to print out #'s of people who make excessive calls to 800 #'s or
|
|||
|
directory assistance. This is called the "800 Exceptional Calling Report."
|
|||
|
ESS could also be programmed to print out logs of who calls certain #'s--like
|
|||
|
a bookie, a known communist, a BBS, etc The thing to remember with ESS is that
|
|||
|
it is a series of programs working together. These programs can be very
|
|||
|
easily changed to do whatever they want it to do. This system makes the job of
|
|||
|
Bell Security, the FBI, NSA, & other organizations that like to invade privacy
|
|||
|
incredibly easy.
|
|||
|
|
|||
|
With ESS, tracing is done in microseconds (Eine Augenblick) & the results are
|
|||
|
printed at the console of a Bell Gestapo officer. ESS will also pick up any
|
|||
|
"foreign" tones on the line such as 2600 Hz!
|
|||
|
|
|||
|
Bell predicts that the country will become totally ESS by the 1990's.
|
|||
|
|
|||
|
You can identify ESS by the following which are usually ESS functions:
|
|||
|
|
|||
|
[1] Dialing 911 for help.
|
|||
|
[2] Dial-Tone-First fortresses.
|
|||
|
[3] Custom Calling Services such as: Call Forwarding, Speed Dialing, & Call
|
|||
|
Waiting. (Ask your business office if you can get these.)
|
|||
|
[4] ANI (Automatic Number Identification) on LD calls.
|
|||
|
|
|||
|
Phreaking does not come to a complete halt under ESS though--just be very
|
|||
|
careful, though!!!
|
|||
|
|
|||
|
Due to the fact that ESS has a computer generated "artificial" ring, you are
|
|||
|
not directly connected to the called parties line until he picks up. Therefore,
|
|||
|
Black Boxes & Infinity Transmitters will not work under ESS!
|
|||
|
|
|||
|
NOTE: Another interesting way to find out what type of equipment you are on is
|
|||
|
to raid the trash can of you local CO--this art will discussed in a
|
|||
|
separate article soon. Asking for a tour of your CO for a "school
|
|||
|
report" can also be helpful.
|
|||
|
|
|||
|
Coming Soon:
|
|||
|
|
|||
|
In the part V, we will start to take a look at telephone electronics.
|
|||
|
|
|||
|
Further Reading:
|
|||
|
|
|||
|
For more information on the above topics, I suggest the following:
|
|||
|
|
|||
|
Notes on the Network, AT&T, 1980.
|
|||
|
|
|||
|
Understanding Telephone Electronics,Texas Instruments, 1983.
|
|||
|
|
|||
|
And subscriptions to:
|
|||
|
|
|||
|
TAP, Room 603, 147 W 42 St, New York,NY 10036. Subscriptions are $10/year.
|
|||
|
Back issues are $0.75. The current issues is #90 (Jan/Feb 1984)
|
|||
|
|
|||
|
2600, Box 752, Middle Island, NY 11953. Subscriptions are $10/year. Back
|
|||
|
issues are $1 each. The current issue is #6 (June 1984).
|
|||
|
|
|||
|
They are both excellent sources of all sorts of information (primarily
|
|||
|
phreaking/hacking).
|
|||
|
|
|||
|
NOTE: For the most part, I have assumed that you have read my previous 3
|
|||
|
courses in the BASIC TELCOM series.
|
|||
|
|
|||
|
Excelsior,
|
|||
|
|
|||
|
*****BIOC
|
|||
|
*=$=*Agent
|
|||
|
*****003
|
|||
|
Knights of Shadow
|
|||
|
|
|||
|
April 13, 1984
|
|||
|
{The Year of Big Brother}
|
|||
|
|
|||
|
<<=-FARGO 4A-=>>
|
|||
|
|
|||
|
|
|||
|
[ RACS III - (914) 942-2638 ]
|
|||
|
[ Sherwood Forest ][ - (914) 359-1517 ]
|
|||
|
|
|||
|
PS Sysops of other BBS's are welcome to use this series on their own boards
|
|||
|
providing that you don't change anything.
|
|||
|
|
|||
|
PPS Due to the radical changes taking place in the Network due to the break up
|
|||
|
this January, I have been forced to make many revisions of certain parts of
|
|||
|
my BASIC TELCOM series. If something does not seem right, please keep the
|
|||
|
current revision date in mind. I have tried to keep this series as current
|
|||
|
as possible.
|
|||
|
|
|||
|
Call The Works BBS - 1600+ Textfiles! - [914]/238-8195 - 300/1200 - Always Open
|
|||
|
|